

Privacy-conscious users do have some recourse. The app’s team is based in Russia, however the company says none of the data it processes its transferred to the country.įor being such a popular app, Barrett says the “privacy policy is both pretty bad, and not much worse than the garden-variety policy you might come across from any app or service that didn’t put time or effort into trying to make its policy even somewhat comprehensible.”įrom a privacy standpoint, she says the company’s clarifications about how it processes photos in the cloud, and when it deletes them, are “helpful, but they don’t make the terms of the privacy policy any less broad.” He says the company uses AWS and Google Cloud. In a statement to Fortune, FaceApp CEO Yaroslav Goncharov confirmed the company processes photos on the cloud, but says “most” are deleted within 48 hours. Among the chief concerns being raised are whether it’s clear to users that FaceApp is uploading their photos to the cloud, instead of processing them privately on a person’s device, and how long the company holds onto user photos. While FaceApp’s privacy policy sheds some light on practices app that makes users look old, it leaves more questions than answers. “Putting aside for a moment the fact that no one has time to read every policy they come across, it’s incredibly difficult to discern what the real risks are from this convoluted mess,” says Lindsey Barrett, a teaching fellow and staff attorney at Georgetown Law’s Communications and Technology Clinic.

The latest version of FaceApp’s privacy policy was posted online was created on January 20, 2017, and does little to address these concerns in clear terms. While the aging app fronted by a Russian company is delighting millions of people, including celebrities, with a glimpse of what they may look like in old age, its terms of service are also raising security concerns about what data the app collects, who owns it, and how photos are processed.
